| Package | Affected versions | Patched versions |
|---|---|---|
| email log | < 2.4.8 | 2.4.8 |
The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free